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Top Stories 

• A 90-car train carrying 2.7 million gallons of crude oil derailed, exploded, and caused a 
fire near Aliceville, Alabama. - Los Angeles Times (See item 17 ) 

• Researchers identified a new zero-day vulnerability in Microsoft Internet Explorer 7,8, and 
9 and observed a sophisticated exploit utilizing the vulnerability being used in a watering 
hole attack. - Dark Reading (See item 39 ) 

• A security researcher found unsecured remote management software running on 30,000 
computers, leaving industrial processes and confidential information open to the Internet. - 
Wired.com (See item 40 ) 

• A fire at a shopping center in Canton, Texas, destroyed about 20 buildings and prompted 
the evacuation of nearby homes. - KTVT 11 Fort Worth (See item 45 ) 
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Energy Sector 



1. November 12, Huron Daily Tribune - (Michigan) DTE halts wind park work as 
probe begins. DTE stopped work indefinitely at their Echo Wind Park in Chandler 
Township after a wind turbine blade broke the week of November 4. The company also 
halted construction on the remaining 10 turbines while they investigate the incident. 
Source: 

http://www.michigansthumb.com/articles/2013/ll/12/news/local news/doc52821bc54 
lle9305941135.txt 

2. November 9, KFDA 10 Amarillo - (Texas) Emergency crews respond to Hutchinson 
Co. explosion. Crews spent over 3 hours putting out a fire at an oil rig in Amarillo 
November 8 after fluids got too close to the rig and caused an explosion, spreading 
flames to three tankers. Four companies suffered equipment losses in the fire. 

Source: http://www.newschannell0.com/storv/23922620/emergencv-crews-respond-to- 
hutchinson-co-explosion 

3. November 8, Associated Press - (Indiana) Pipeline leak closes park, BP says no oil 
spilled. Officials with BP announced a leak was detected in Dyer during testing of a 
pipeline, closing Northgate Park as a precaution, but that no oil was spilled. The 
company stated that repairs will be made to the pipeline. 

Source: http://www.courierpress.com/news/2013/nov/08/pipeline-leak-closes-park-bp- 
says-no-oil-spilled/ 

For additional stories, see items 17 and 40 
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Chemical Industry Sector 

4. November 9, Associated Press - (Ohio) Akron chemical spill leads to brief 
evacuation. An accidental spill of roughly 3,000 gallons of chemicals onto tracks 
behind Emerald Performance Materials in Akron, caused an evacuation of some 
businesses and houses for several hours November 9. 

Source: http://www.mariettatimes.com/page/content.detail/id/405551/Akron-chemical- 
spill-leads-to-brief-evacuation.html?isap=l&nav=5018 

1 Return to top i 

Nuclear Reactors, Materials, and Waste Sector 

5. November 11, Anderson Independent Mail - (South Carolina) Radioactive leak at 
Oconee Nuclear Station shuts down reactor. The Unit 1 reactor at the Oconee 
Nuclear Station in Seneca, South Carolina, was shut down November 1 1 after a small 
leak of radioactive water was found and contained November 8. 

Source: http://www.independentmail.eom/news/2013/nov/l 1/radioactive-leak-oconee- 
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nuclear-station-shuts-down/ 
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Critical Manufacturing Sector 

6. November 9, Autoblog - (National) Chrysler recalls 1.2 million Ram pickup trucks. 
Chrysler announced three recalls covering around 1.2 million Ram pickup trucks from 
model years 2003-2012 sold mostly in the U.S. that may have misaligned tie rods. 
Source: http ://www. autoblog .com/20 13/11 /09/ram-pickup-recall-tie-rods/ 

For another story, see item 40 
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Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 

7. November 12, IDG News Service - (International) Banking malware infections rise to 
highest level since 2002. Trend Micro released a report for the third quarter of 2013 
which found that over 200,000 new banking malware infections were observed 
between July and September, the highest rate in 1 1 years. The report stated that ZeuS 
(also known as Zbot) malware was the most common type of malware, and that the 
U.S. was the most affected country, among other findings. 

Source: http://www.networkworld.eom/news/2013/l 1 1213-banking-malware- 
infections-rise-to-275838.html 

8. November 9, Reuters - (National) U.S. seeks $864 million from Bank of America 
after fraud verdict. Federal prosecutors will seek $864 million in penalties from Bank 
of America after it was ruled that the bank is liable for fraud in the sale of defective 
mortgages by its Countrywide unit. The government will also seek penalties against a 
former Countrywide executive who was also found liable in the fraud. 

Source: http://www.reuters.com/article/2013/ll/09/bankofamerica-hustle- 
idINDEE9 A804P20 131109 

9. November 8, KATC 3 Lafayette - (Louisiana; Georgia) Jury finds Ga. men guilty of 
bank fraud scheme. Three Atlanta men were found guilty November 8 for a check 
fraud scheme in Lafayette, Louisiana, that used stolen commercial checks to create 
fraudulent checks and then use others to cash them. Police found 43 stolen checks 
totaling $155,223 as well as paper and equipment used to create the fake checks. 
Source: http://www.katc.com/news/iurv-finds-ga-men-guilty-of-bank-fraud-scheme/ 
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10. November 7, U.S. Department of Labor - (Georgia) Garda Cash Logistics cited by 
U.S. Department of Labor’s OSHA for failure-to-abate and serious violations; 
more than $55,000 in fines proposed. The Occupational Safety and Health 
Administration cited armored car service Garda Cash Logistics with three failure-to- 
abate and one serious violation at their Norcross facility. Proposed fines totaled 
$55,400 
Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=25059 

For another story, see item 40 
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Transportation Systems Sector 

11. November 12, Pittsburgh Post-Gazette - (Pennsylvania) Water main break closes 
part of Pittsburgh's West Liberty Avenue. A water main break in a 10-inch water 
line near Pioneer Avenue in Pittsburgh closed traffic on outbound lanes of West Liberty 
Avenue for several hours while crews conducted repairs November 12. 

Source: http://www.post-gazette.com/local/city/2013/ll/12/Water-main-break-closes- 
Pittsburgh-s-West-Libertv-Avenue/stories/20131 1 120160 

12. November 11, KOK1 23 Tulsa - (Oklahoma) Helicopter damaged en route to 
Veterans Day parade. An accident on highway 75 damaged a helicopter bound for 
Tulsa’s Veterans Day parade after it was kn ocked off a trailer, prompting crews to 
spend about 2 hours cleaning up the wreck November 11. 

Source: http://www.fox23.com/news/local/story/Helicopter-damaged-en-route-to- 
Veterans-Day-parade/ivOixbl6aUem eVK07pGBg.cspx 

13. November 11, WTNH 8 New Haven - (Connecticut) Bus crash on New Haven Green 
injures officer. An accident involving a police vehicle and a Connecticut Transit bus 
left 22 passengers injured and closed an intersection in New Haven for several hours as 
police investigated the crash November 11. 

Source: http://www.wtnh.com/news/new-haven-cty/bus-crash-on-new-haven-green 

14. November 11, Associated Press - (Texas) 3 people die in small plane crash in Texas. 
An accident involving a single-engine plane registered in Naples, Florida, that crashed 
near Amarillo killed three people onboard. Authorities are investigating the crash. 
Source: http://news.msn.com/us/3-people-die-in-small-plane-crash-in-texas 

15. November 11, KLTV 7 Tyler - (Texas) Gregg Co. residents temporarily evacuated 
after natural gas leak. An accident involving a car that hit a gas meter in in Longview, 
Texas, November 10 caused a natural gas leak which prompted an evacuation of a one 
mile radius and the closure of Highway 322 in both directions for about 3 hours into 
November 11. 
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Source: http://www.kltv.com/storv/23931070/gregg-co-residents-evacuated-after- 
natural- gas -leak 



16. November 10, KOKI 23 Tulsa - (Oklahoma) One fatality in the small plane crash in 
Owasso. An accident involving a small engine plane that crashed in Owasso killed one 
person November 10. Officials are investigating the cause of the accident. 

Source: http://www.fox23.com/mostpopular/storv/One-fatalitv-in-the-small-plane- 
crash-in-Owasso/tKqliWi9UO-gnDQ7JOprbg.cspx 

17. November 9, Los Angeles Times- (Alabama) Train in Alabama oil spill was carrying 
2.7 million gallons of crude. A 90-car train carrying 2.7 million gallons of crude oil 
derailed, exploded, and caused a fire November 7 near Aliceville, Alabama, spilling the 
oil into a surrounding wetland while firefighters continued battling the blaze that 
burned through November 9. The accident is under investigation while crews continue 
to remove the train cars from the marsh. 

Source: http://www.latimes.com/nation/nationnow/la-na-nn-train-crash-alabama-oil- 
20131 109,0,780637.story 
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Food and Agriculture Sector 

18. November 12, Food Safety News - (National) Oxy Elite Pro recalled as more hepatitis 
A cases surface. USPLabs recalled certain shipments of their OxyElite Pro dietary 
supplement November 10, linked to one death and at least 56 cases of hepatitis A, after 
the U.S. Food and Drug Administration threatened using legal action to stop 
distribution and sales. 

Source: http://www.foodsafetvnews.com/2013/ll/oxyelite-pro-recalled-as-more- 
hepatitis-cases-surface/ 

19. November 12, Dominican Today - (International) FDA opens the U.S. wide to 
Dominican veggies. The U.S. Food and Drug Administration announced the approval 
of several Dominican Republic vegetables entering the U.S. market without being 
subjected to an automatic review process that was previously in effect in the country 
for 25 years. 

Source: http://www.dominicantodav.com/dr/local/2013/ll/ll/49594/FDA-opens- 
theUS-wide-to-Dominican- veggies 

20. November 11, U.S. Food and Drug Administration - (National) Palmer Candy 
Company voluntarily recalls HyVee Chocolate Caramel Clusters and HyVee 
Chocolate Covered Caramels due to undeclared peanut allergen. Palmer Candy 
Company of Sioux City, Iowa, recalled 102 cases of HyVee Chocolate Caramel 
Clusters and 90 cases HyVee Chocolate Covered Caramel products because they may 
contain undeclared peanuts. The recall was initiated after a packaging error was 
discovered. 

Source: http://www.fda.gov/Safetv/Recalls/ucm374401.htm 
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21. November 10, Food Safety News - (California; Washington; Arizona) 26 E. coli cases 
in CA, WA, and AZ linked to salads and wraps. Glass Onion Catering and Athertone 
Foods of Richmond, California, voluntarily recalled ready-to-eat salads and sandwich 
wraps containing cooked chicken and ham products because of potential E. coli 
0157:H7 contamination that sickened at least 26 individuals in California, Washington, 
and Arizona. 

Source: http://www.foodsafetvnews.eom/2013/l l/26-with-e-coli-ol57h7-in-califomia- 
washington-and-arizona-linked-to-salads-and-wraps/ 

22. November 9, Food Safety News - (Pennsylvania) 12 cases of E. coli linked to 
Pittsburgh restaurant. The Porch restaurant in Pittsburgh voluntarily closed October 
30 after the Allegheny County Health Department confirmed that 12 employees and 
customers were sickened with E. coli 0157:H7 linked to food served at the facility. 
Source: http://www.foodsafetvnews.com/2013/ll/12-cases-of-e-coli-linked-to- 
pittsburgh-restaurant/ 

23. November 9, Food Safety News - (National) Plum Organics recalls kid’s food 
products for possible spoilage. Plum Organics voluntarily recalled Baby Stage 2, Tots 
Mish Mash and Kids pouch products because of possible spoilage November 9. 

Source: http://www.foodsafetynews.eom/2013/l 1/plum-organics-recalls-kids-food-for- 
possible-spoilage 

For another story, see item 40 
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Water and Wastewater Systems Sector 

24. November 12, WMAQ 5 Chicago - (Illinois) Water main break creates huge 
sinkhole on Chicago’s South Side. Service was restored to residents in Chicago’s 
South Side after about 24 hours November 1 1 after a water main broke November 10 
and created a large sinkhole that closed a street. Bottled water was distributed by 
authorities, and residents were advised to boil their water until further notice after water 
service was restored. 

Source: http://www.nbcchicago.com/traffic/transit/Water-Main-Break-Huge-Sinkhole- 
Chicago-23 1442601 .html 

25. November 11, Denver Post - (Colorado) Del Norte water tainted with E. coli; 
residents advised to boil. Tests confirmed the presence of E. coli in the town of Del 
Norte’s water system November 7 and 8, prompting authorities to issue a boil water 
notice. 

Source: http://www.denverpost.com/environment/ci 24501647/del-norte-water-tainted- 
e-coli-residents-advised 



26. November 10, Honolulu Star Advertiser - (Hawaii) Heavy rains blamed for sewage 
spill in Palolo. A sewage overflow in Palolo November 10 caused by heavy rains 
released about 2,950 gallons of untreated wastewater into Palolo Stream. Signs were 
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posted warning people to stay out of the stream, and a brown water advisory was 
posted for all Oahu waters. 

Source: 

http://www.staradvertiser.com/news/breaking/20131110 Heavy rains blamed for se 
wage spill in Palolo.html 

For another story, see item 11 
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Healthcare and Public Health Sector 

27. November 8, KCRG 9 Cedar Rapids - (Iowa) Cedar Rapids nursing home fined. The 
federal government cited Heritage Nursing & Rehab Center in Cedar Rapids with 
multiple violations and issued a $7,250 fine after a resident left the nursing home in 
September without the facility staff knowing the resident’s whereabouts for roughly 25 
minutes. 

Source: http://www.kcrg.com/news/local/-Cedar-Rapids-Nursing-Home-Fined- 
231200411.html 



For another story, see item 40 
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Government Facilities Sector 

28. November 11, Baltimore Sun - (Maryland) McDaniel students don’t stay in the dark 
after power outage closes school. A power outage due to a generator failure 
November 10 at McDaniel College prompted officials to cancel classes November 11 
after most buildings on campus remained without power. 

Source: http://www.baltimoresun.com/news/maryland/caiToll/westminster/ph- 
mcdaniel-power-outage-20131 1 1 l,0,7805524.story 

29. November 11, Oklahoma City Oklahoman - (Oklahoma) Oklahoma City school 
carbon monoxide leak hospitalizes 6. Three students and three staff members from 
Lee Elementary School in Oklahoma City were taken to area hospitals, while four 
others were treated at the scene, November 1 1 after a carbon monoxide leak at the 
school. Classes were cancelled for November 12 while crews replaced a heating unit 
believed to be the cause of the leak. 

Source: http://newsok.com/oklahoma-citv-elementary-school- 
evacuated/article/3 903622 

30. November 11, KWGN 2 Denver - (Colorado) School bus crash injures 6 in eastern 
Colorado. Six people were injured, including four students, after a Wray School 
District bus and a truck collided in Yuma County November 11. 

Source: http://kwgn.com/2013/ll/ll/school-bus-crash-iniures-6-in-eastem-colorado/ 
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31. November 11, KCPQ 13 Tacoma - (Washington) Scabies outbreak hits area high 
school. South Kitsap High School in Port Orchard notified parents November 8 after 
several students complained of scabies-like symptoms and urged those students to stay 
home and seek treatment. School officials worked to clean the school and are 
investigating the cause of the outbreak. 

Source: http://ql3fox.eom/2013/l 1/1 1/scabbies-outbreak-hits-area-high-school/ 

32. November 11, WWL-TV 4 New Orleans - (Louisiana) NOPD responds to school bus 
accident, 4 taken to hospital. Four people, including two children, were injured 
November 1 1 after an accident involving an Algiers Technology Academy school bus 
in New Orleans. 

Source: http://www.wwltv.com/news/NOPD-responds-to-school-bus-accident-4-taken- 
to-hospital-23 1 42683 1 .html 

33. November 11, WLEX 18 Lexington - (Kentucky) $40,000 worth of copper stolen 
from Lexington school construction site. Thieves stole $40,000 worth of copper from 
a construction site at Jessie Clark Middle School in Lexington over the weekend of 
November 9. Construction at the school is projected to last until 2015. 

Source: http://www.lexl8.com/news/40-000-worth-of-copper-stolen-from-lexington- 
school-construction-site 

34. November 10, Wisconsin State Journal - (Wisconsin) University Avenue fire injures 
three, including two firefighters. The Madison Fire Department is investigating the 
cause of a fire that left three people injured and damaged two sections of an apartment 
building that houses University of Wisconsin-Madison students November 9. 

Source: http://host.madison.com/news/local/crime and courts/university-avenue-fire- 
injures-three-including-two-firefighters/article 507572d6-4a0d-lle3-9c9d- 
0019bb2963f4.html 



For additional stories, see items 3 and 46 
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Emergency Services Sector 

35. November 10, KSBY 6 San Luis Obispo - (California; New York) Man poses as Santa 
Barbara City fire inspector. Santa Barbara Police issued a warning to the public that a 
man was posing as a county fire inspector and conducting mock inspections at different 
businesses and charging for the inspections. The suspect was detained in New York for 
unrelated charges. 

Source: http://www.ksbv.com/news/man-poses-as-santa-barbara-city-fire-inspector/ 

36. November 9, Reuters - (Oklahoma; Maryland) 33 years later, Oklahoma police catch 
escaped convict. Authorities in Maryland are seeking an inmate’s extradition after he 
turned himself in to Oklahoma City police after escaping from a Maryland prison in 
1980. Police stated the man turned himself in after he became tired of paying off a 
business partner who threatened to expose him as a fugitive. 
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Source: http://news.msn.com/crime-iustice/33-vears-later-oklahoma-police-catch- 
escaped-convict 
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Information Technology Sector 

37. November 12, The Register - (International) Stale Blackhole leads to dried-up spam, 
claim badhat-probers. Trend Micro researchers found that with the Blackhole exploit 
kit no longer being updated, cybercriminals have turned to other methods for infecting 
users, with the Upatre exploit kit being a popular replacement and often used to spread 
the Cryptolocker ransomware. 

Source: http://www.theregister.co.uk/2013/ll/12/cryptolocker rise blackhole demise/ 

38. November 12, Softpedia - (International) Reflected and stored XSS flaws found in D- 
Link 2760N routers. A security researcher found and disclosed several stored and 
reflected cross-site scripting (XSS) vulnerabilities in the Web user interface for D-Link 
2760N routers. 

Source: http://news.softpedia.com/news/Reflected-and-Stored-XSS-Flaws-Found-in-D- 
Link-2760N-Routers-399244.shtml 



39. November 12, Dark Reading - (International) New IE vulnerability found in the 
wild; sophisticated Web exploit follows. FireEye researchers identified a new zero- 
day vulnerability in Microsoft Internet Explorer 7, 8, and 9 that uses a memory access 
vulnerability to execute code on computers that access a malicious Web site. A 
sophisticated exploit using the vulnerability was observed in the wild in a watering hole 
attack on an undisclosed Web site known to bring in visitors interested in national and 
international security issues. 

Source: http://www.darkreading.com/vulnerability/new-ie-vulnerabilitv-found-in-the- 
wild-s/240163814 



40. November 8, Wired.com - (International) Power plants and other vital systems are 
totally exposed on the Internet. A security researcher used a tool to run a scan of the 
iPv4 address space except for government agencies and universities and found 
unsecured remote management software running on 30,000 computers, leaving 
industrial processes and confidential information open to the Internet due to a lack of 
any security measures. Open virtual network computing systems were found in uses 
such as factory automation, hydroelectric power plants, agricultural automation, 
pharmacies, cash registers, and several others. 

Source: http ://w w w . wired .com/threatle vel/20 13/11 /internet-expo sed 
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Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 



41. November 11, Seattle Times - (Washington) Crews find cut in communication line to 
San Juan Islands. CenturyLink discovered a break in a two-mile-long underwater 
cable was what caused 9-1-1, landline, and cellphone service interruptions to San Juan, 
Orcas, and Lopez islands November 5 and resulted in the San Juan County Council 
declaring a state of emergency. Landline and 9-1-1 service was restored, while full 
cellphone service continued to be intermittent 

Source: http://blogs.seattletimes.com/todav/2013/ll/crews-find-cut-in-communication- 
line-to-san-juan-islands/ 
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Commercial Facilities Sector 

42. November 11, Associated Press - (New York) Boy, 16, charged as adult in NY ice- 
rink shooting. Two people were wounded in a shooting November 9 at the Bryant Park 
ice-skating rink in New York City after a teenager attempted to steal a coat, was 
refused, and returned to the rink, opening fire. 

Source: http://news.msn.com/crime-iustice/bov-16-charged-as-adult-in-ny-ice-rink- 
shooting 

43. November 10, WPMT 43 York - (Pennsylvania) Crews knock down 4-alarm 
restaurant fire in Cumberland County. A 4-alarm fire at Visaggio’s Ristorante in 
Cumberland County November 10 left the building a total loss after crews spent several 
hours battling the blaze. Officials are investigating the cause of the fire. 

Source: http://fox43.eom/2013/l l/10/crews-knock-down-4-alarm-restaurant-fire-in- 
cumberland-county 

44. November 10, Dallas Morning News - (Texas) Two dead, one injured in shooting at 
Arlington apartment. Police in Arlington, Texas, are investigating a shooting at an 
apartment building November 9 that left two men dead and one injured. 

Source: http ://crimeblog .dallasnews . com/20 13/11 /two-dead-one-ini ured-in- shooting-at- 
arlington-apartment.html/ 



45. November 9, KTVT 11 Fort Worth - (Texas) Fire guts Canton shopping center. A 
fire at The Mountain at Old Mill Marketplace shopping center in Canton, Texas, 
November 9 destroyed about 20 buildings and prompted the evacuation of nearby 
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homes while firefighters worked to put out flames. 

Source: http://dfw.cbslocal.com/2013/ll/09/fire-guts-canton-shopping-center/ 
For additional stories, see items 35 and 40 



T Return to top i 



Dams Sector 



46. November 11, Los Angeles Times - (Arizona) Lake Powell dam releases increased to 
spread sediment in Grand Canyon. The U.S. Department of the Interior began 
increasing releases from the Glen Canyon Dam on Lake Powell, Arizona, the week of 
November 1 1 in order to replenish sediment in the Grand Canyon, which will restore 
beaches for visitors and water habitat for animals. 

Source: http://www.latimes.com/science/sciencenow/la-sci-sn-grand-canyon-high- 
flow-experiment-20131 1 1 1,0,1 196620.story 

For another story, see item 40 
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